This policy explains how Giaiphau3D collects, uses, stores and protects personal data when you use giaiphau3d.com, the 3D model app app.giaiphau3d.com, the quiz site quiz.giaiphau3d.comand related services (the “Service”).
1. Data controller
Giaiphau3D is operated by Trương Công Hậu, Da Nang, Vietnam. Contact: giaiphauso@gmail.com.
2. Data we collect
- From Google Sign-In (scopes
openid,email,profileonly): email address, display name, profile picture URL and Google account ID. We never receive your Google password and do not access Gmail, Drive, contacts or any other Google data. - Usage data: account creation, last login and last activity time; session data (session token stored as a one-way hash, browser/device type); learning progress such as quiz results when that feature is enabled; messages you send us.
- Analytics: we use Google Analytics to measure traffic and usage (pages viewed, buttons clicked, duration, device type, approximate region, traffic source) in aggregated form. We do not send your email, name or account ID to Google Analytics.
3. How we use data
To create and manage your account, authenticate you and keep you signed in; to provide and personalize the Service and save your learning progress; to support you and send important service notices; to analyze and improve the Service; to keep the system secure and prevent abuse; and to comply with legal obligations.
4. Google user data
Giaiphau3D's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to sign you in and operate your account; we do not sell it, do not use it for advertising, and do not allow humans to read it except with your consent, for security purposes, or as required by law.
5. Sharing
We do not sell personal data. We share data only with infrastructure providers that process it on our behalf: Google (sign-in and analytics), Amazon Web Services (hosting and content delivery) and Neon (account database). We may disclose data to competent authorities when legally required.
6. Cookies
We use a strictly necessary cookie (httpOnly, HTTPS-only) to keep you signed in, and Google Analytics cookies (_ga, _ga_<id>, set on giaiphau3d.com and its subdomains, lasting up to 2 years) for statistics. You can block analytics cookies in your browser or with the Google Analytics Opt-out add-on.
7. Storage location and international transfer
Our servers and database are located in Singapore (AWS and Neon, Asia Pacific region). Static content may be delivered through the AWS CloudFront global network, and analytics data is processed by Google. By using the Service you consent to this transfer of data outside Vietnam.
8. Retention
Account data is kept while your account exists. Session data is removed or invalidated when the session expires or you sign out. Google Analytics data is kept for up to 14 months and then deleted automatically by Google. When you request account deletion, we delete your personal data within 30 days, except where retention is required by law.
9. Security
We use encrypted connections (HTTPS/TLS), hashed session tokens, restricted database access and managed secret storage. No system is completely secure; if an incident affects your data, we will notify you as required by law.
10. Your rights
Under Vietnamese personal data protection law, you may be informed about processing, give or withdraw consent, access, obtain a copy of, correct or delete your data, restrict or object to processing, and lodge complaints. To exercise these rights, email giaiphauso@gmail.comfrom your account email. You can also revoke Giaiphau3D's access at any time in your Google Account connections.
11. Age
The Service is intended for users aged 16 and over. We do not knowingly collect data from children under 16; if you believe a child has provided us data without guardian consent, contact us and we will delete it.
12. Changes and language
We may update this policy; the last updated date is shown at the top and significant changes will be announced in the Service or by email. See also our Terms of Service. This is a translation of the Vietnamese version; if they differ, the Vietnamese version prevails.